Method and apparatus for MPLS label allocation for a BGP MAC-VPN

CROSS REFERENCE TO RELATED APPLICATION

p-0002This application claims the benefit of provisional patent application Ser. No. 61/346,434, filed on May 19, 2010, entitled MPLS LABEL DISTRIBUTION SCHEME FOR BGP MAC-VPNs, which provisional patent application is incorporated herein by reference.

FIELD OF THE INVENTION

p-0003The invention relates to the field of communication networks and, more specifically, to multi-protocol label switching (MPLS) networks.

BACKGROUND OF THE INVENTION

p-0004Multiprotocol Label Switching (MPLS) enables efficient delivery of a wide variety of differentiated, end-to-end services. MPLS supports delivery of such services using label switched paths (LSPs). Depending on different factors, hundreds or even thousands of LSPs may be provisioned in a given MPLS network. As network conditions change, LSPs provisioned in a given MPLS network often need to be changed.

p-0005Border Gateway Protocol (BGP) Media Access Control (MAC) Virtual Private Networking (VPN) supports BGP-based distribution of MAC addresses in a Virtual Private LAN Service (VPLS).

p-0006Unfortunately, there is no operable solution to the problem of providing BGP MAC-VPN within the context of infrastructure based on MPLS labels due to, illustratively, the lack of an operable mechanism or procedure for label allocation.

SUMMARY OF THE INVENTION

p-0007Various deficiencies in the prior art are addressed through the invention of a method and apparatus for allocating labels within an MPLS infrastructure supporting BGP MAC-VPN.

p-0008One embodiment is a method for distributing flooding labels within a Multiprotocol Label Switching (MPLS) infrastructure supporting Border Gateway Protocol (BGP) Media Access Control (MAC) Virtual Private Networking (VPN), wherein the method comprises generating, at destination provider edge (PE) routers, a generic flooding label (GFL) for each MAC-VPN Instance (MVI) that is advertising; generating, at destination PE routers, a Multi-Homing Flooding Label (MHFLx) for each designated forwarder (DF) Ethernet Segment Identifier (ESI) that is advertising; and distributing, toward source PE routers, each generated GFL and MHFLx label using MAC-VPN Network Layer Reachability Information (NLRI) including a Route-Distinguisher (RD) and an ESI.

BRIEF DESCRIPTION OF THE DRAWINGS

p-0009The teachings of the present invention can be readily understood by considering the following detailed description in conjunction with the accompanying drawings, in which:

p-0010<figref idrefs="DRAWINGS">FIG. 1</figref> depicts a high-level block diagram of a communication network architecture;

p-0011<figref idrefs="DRAWINGS">FIG. 2</figref> depicts a flow diagram of a downstream label allocation method according to one embodiment;

p-0012<figref idrefs="DRAWINGS">FIG. 3</figref> depicts a flow diagram of an upstream label allocation method according to one embodiment;

p-0013<figref idrefs="DRAWINGS">FIG. 4</figref> depicts a computer architecture and optional switching mechanism suitable for use in the various embodiments described herein; and

p-0014<figref idrefs="DRAWINGS">FIG. 5-7</figref> depict high-level block diagrams of a communication network architecture operating according to various embodiments.

p-0015To facilitate understanding, identical reference numerals have been used, where possible, to designate identical elements that are common to the figures.

DETAILED DESCRIPTION OF THE INVENTION

p-0016The present invention will be primarily depicted and described herein within the context of a Multiprotocol Label Switching (MPLS) infrastructure supporting Border Gateway Protocol (BGP) Media Access Control (MAC) Virtual Private Networking (VPN). The described BGP MAC-VPN provides BGP-based distribution of MAC addresses in a Virtual Private LAN Service (VPLS) Forwarding Information Base (FIB), thereby eliminating MAC learning and flooding over the Multiprotocol Label Switching (MPLS) core. Further, the system is capable of providing Multipath or Active/Active Access Resiliency for a Layer 2 Multipoint-to-Multipoint VPN service.

p-0017A label allocation scheme provided herein to address various challenges, including (1) Packet Duplication, such as where remote customer edge (or customer equipment) CE receives two copies of the same packet; (2) Loop Prevention, such as where a packet originated by a specific CE is returned to that specific CE; (3) MAC table instability, such as where a MAC M<b>1</b> appears alternatively at destination CEs on different links, thereby creating re-ordering issues &amp; MAC table instability.

p-0018<figref idrefs="DRAWINGS">FIG. 1</figref> depicts a high-level block diagram of a communication network architecture according to one embodiment. Specifically, the architecture <b>100</b> of <figref idrefs="DRAWINGS">FIG. 1</figref> provides a Border Gateway Protocol (BGP) Multi-Protocol Label Switching (MPLS) network (BGP MPLS network) supporting Media Access Control (MAC) Virtual Private Networking (VPN) or MAC-VPN.

p-0019The architecture <b>100</b> includes an IP/MPLS communication network (CN) <b>110</b>, a network management system (NMS) <b>120</b>, a plurality of provider edge (PE) routers (or MPLS Edge Switches (MES)) <b>130</b>-<b>1</b> through <b>130</b>-<b>4</b> (collectively PE routers <b>130</b>) and a plurality of customer edge (CE) routers <b>140</b>-<b>1</b> through <b>140</b>-<b>7</b> (collectively CE routers <b>140</b>).

p-0020The PE routers <b>130</b> are connected together by a full mesh of MPLS label switched path (LSP) tunnels implemented via numerous routers or switching elements (not shown) within the MPLS infrastructure of CN <b>110</b>.

p-0021Each of the various CE routers <b>140</b>-<b>1</b> through <b>140</b>-<b>7</b> is associated with a respective media access control (MAC) and is connected to one or more PE routers <b>130</b>. For example, in the illustrative embodiment of <figref idrefs="DRAWINGS">FIG. 1</figref>, PE router <b>130</b>-<b>1</b> is connected to CE routers <b>140</b>-<b>1</b> through <b>140</b>-<b>3</b>, PE router <b>130</b>-<b>2</b> is connected to CE routers <b>140</b>-<b>2</b> through <b>140</b>-<b>4</b>, PE router <b>130</b>-<b>3</b> is connected to CE routers <b>140</b>-<b>5</b> and <b>140</b>-<b>6</b>, and PE router <b>130</b>-<b>4</b> is connected to CE routers <b>140</b>-<b>6</b> and <b>140</b>-<b>7</b>. It will be appreciated that more or fewer CE routers <b>140</b> may be connected to the various PE routers <b>130</b>, and that the specific combinations/connections are provided herein for illustrative purposes only.

p-0022Data packets or datagrams are routed according to ingress and egress virtual connection (VC) labels on a per-service basis. The VC labels are used by the PE routers <b>130</b> for demultiplexing traffic arriving from different services over the same set of LSP tunnels.

p-0023PE routers learn the source media access control (MAC) addresses of the traffic arriving on their access and network ports. Each PE router <b>130</b> maintains a forwarding information base (FIB) for each VPLS service instance, and learned MAC addresses are populated in the FIB table of the service. All traffic is switched based on MAC addresses and forwarded between all participating PE routers using the LSP tunnels.

p-0024Unknown packets (that is, packets where the destination MAC address has not been learned) are forwarded on all LSPs to the participating PE routers for that service (i.e., flooded to the PE routers) until an appropriate destination or target station responds such that the MAC address is learned by the PE routers associated with that service.

p-0025The NMS <b>120</b> is a network management system adapted for performing the various management functions described herein. The NMS <b>120</b> is adapted to communicate with nodes of CN <b>110</b>. The NMS <b>120</b> may also be adapted to communicate with other operations support systems (e.g., Element Management Systems (EMSs), Topology Management Systems (TMSs), and the like, as well as various combinations thereof).

p-0026The NMS <b>120</b> may be implemented at a network node, network operations center (NOC) or any other location capable of communication with the CN <b>110</b> and various elements related thereto. The NMS <b>120</b> may support user interface capabilities to enable one or more users to perform various network management, configuration, provisioning or control related functions (e.g., enter information, review information, initiate execution of various methods as described herein and the like). Various embodiments of the NMS <b>120</b> are adapted to perform functions as discussed herein with respect to the various embodiments.

p-0027Several paths are specifically referenced in <figref idrefs="DRAWINGS">FIG. 1</figref> for simplifying the discussion with respect to the operation of the various embodiments. Specifically, a path <b>190</b> communicates data between MES-<b>2</b> (<b>130</b>-<b>2</b>) and the network <b>110</b>, a path <b>191</b> communicates data between MES-<b>1</b> (<b>130</b>-<b>1</b>) and the network <b>110</b>, a path <b>192</b> communicates data between MES-<b>1</b> (<b>130</b>-<b>1</b>) and CE-<b>1</b> (<b>140</b>-<b>1</b>), a path <b>193</b> communicates data between MES-<b>1</b> (<b>130</b>-<b>1</b>) and CE-<b>2</b> (<b>130</b>-<b>2</b>), a path <b>194</b> communicates data between MES-<b>1</b> (<b>130</b>-<b>1</b>) and CE-<b>3</b> (<b>130</b>-<b>3</b>), a path <b>195</b> communicates data between MES-<b>2</b> (<b>130</b>-<b>2</b>) and CE-<b>2</b> (<b>130</b>-<b>2</b>), a path <b>196</b> communicates data between MES-<b>2</b> (<b>130</b>-<b>2</b>) and CE-<b>3</b> (<b>130</b>-<b>3</b>), and a path <b>197</b> communicates data between MES-<b>2</b> (<b>130</b>-<b>2</b>) and CE-<b>4</b> (<b>130</b>-<b>4</b>). Other paths exist as shown in <figref idrefs="DRAWINGS">FIG. 1</figref>.

p-0028BGP MPLS Based MAC-VPN

p-0029The above described communication network implements a Border Gateway Protocol (BGP) Multi-Protocol Label Switching (MPLS) network (BGP MPLS network) supporting Media Access Control (MAC) Virtual Private Networking (VPN) or MAC-VP N. Various implementation details will now be described.

p-0030As previously noted, the MAC-VPN network comprises CEs that are connected to PEs or MPLS Edge Switches (MESs) disposed at the edge of an MPLS infrastructure. A CE may be a host, a router or a switch. The MPLS Edge Switches provide Layer 2 virtual bridge connectivity between the CEs. There may be multiple MAC-VPNs in the provider's network. The instance of a MAC-VPN on an MES is referred to as a MAC-VPN Instance (MVI). The MESs are connected by a MPLS LSP infrastructure.

p-0031MAC Learning Through Control Pane

p-0032Learning between MESs occurs in the control plane, specifically the BGP control plane. This control plane learning advantageously enables load balancing, allows CEs to connect to multiple active points of attachment, and improves convergence times in the event of certain network failures. Learning between MESs and CEs occurs in the data plane, such as according to IEEE 802.1x, 802.1aq, LLDP, or other protocols.

p-0033The Layer 2 forwarding table on a MES may contain all the MAC destinations known to the control plane or a subset of the known MAC destinations selected using a cache based scheme. For instance, the forwarding table of a specific MES may be populated only with the MAC destinations of the active flows transiting the specific MES.

p-0034The policy attributes of a MAC-VPN are similar to those of an IP VPN. A MAC-VPN instance requires a Route-Distinguisher (RD), and a MAC-VPN requires one or more Route-Targets (RTs). A CE attaches to a MAC-VPN on a MES in a particular MVI on a VLAN or simply an Ethernet interface. When the point of attachment is a VLAN there may be one or more VLANs in a particular MAC-VPN. Some deployment scenarios guarantee uniqueness of VLANs across MAC-VPNs: all points of attachment of a given MAC-VPN use the same VLAN, and no other MAC-VPN uses this VLAN. This is referred to as a “Single VLAN MAC-VPN.”

p-0035Ethernet Segment Identifier

p-0036If a CE is multi-homed to two or more MESs, the set of attachment circuits constitutes an Ethernet segment. An Ethernet segment may appear to the CE as a Link Aggregation Group. Ethernet segments have an identifier denoted as the Ethernet Segment Identifier (ESI). A single-homed CE is considered to be attached to a Ethernet segment with ESI <b>0</b>; otherwise, an Ethernet segment has a unique nonzero ESI.

p-0037The ESI can be assigned using various mechanisms: (1) the ESI may be configured; (2) if Link Aggregation Control Protocol (LACP) is used between the MESs and CEs that are hosts, then the ESI may be determined by LACP; (3) if Link Label Distribution Protocol (LLDP) is used between the MESs and CEs that are hosts, then the ESI may be determined by LLDP; and (4) in the case of indirectly connected hosts and a bridged LAN between the hosts and the MESs, the ESI is determined based on the Layer 2 bridge protocol, where the value of the ESI is derived by listening to BPDUs on the Ethernet segment (the MES learns the Switch ID, MSTP ID and Root Bridge ID by listening to BPDUs).

p-0038Determining Reachability to Unicast MAC Addresses

p-0039MESs forward packets that they receive based on the destination MAC address. Thus, the MESs must be able to learn how to reach a given destination unicast MAC address. There are two components to MAC address learning, “local learning” and “remote learning.”

p-0040Local Learning is where a particular MES learns MAC addresses of the CEs that are connected to it. That is, the MESs in a particular MAC-VPN support local data plane learning from connected CEs via standard Ethernet learning procedures. The MES learns MAC addresses in the data plane when it receives packets from the CE network such DHCP requests, gratuitous ARP requests for its own MAC, ARP request for a peer and the like. Alternatively, if a CE is a host then MESs may learn the MAC addresses of the host in the control plane using extensions to protocols such as LLDP that run between the MES and the hosts. In the case where a CE is a host or a switched network connected to hosts, the MAC addresses is reachable via a given MES may move such that it becomes reachable via another MES. This is referred to as a MAC Move.

p-0041Remote learning is where a particular MES learns MAC addresses of the remote CEs; namely, CEs that are “behind” or connected via other MESs, or CEs or hosts that are “behind” or connected via remote CEs. Remote learning of MAC addresses is performed in the control plane. In order to achieve remote learning, each MES advertises in the control plane the MAC addresses it learns from its locally attached CEs.

p-0042MES Control Plane Advertisement

p-0043Control plane advertisement by each MES of its learned MAC addresses is provided to other MESs in the MAC-VPN using an extension of BGP. Specifically, BGP is extended to advertise these MAC addresses using a Network Layer Reachability Information (NLRI) denoted as MAC-VPN-NLRI. This extension includes for MAC-VPN a new Address Family Identifier (AFI) and a new Subsequent Address Family Identifier (SAFI).

p-0044The MAC-VPN-NLRI encodes a number of information elements or fields when used for BGP MAC VPN, such as the Route Type (RT), Length field and Value field.

p-0045The Route Type (RT) used to identify the format of the following value field. A number of route type code points may be defined. The Length field used to indicate the length in octets of the following Value field. The Value field—carries information specific to each individual RT.

p-0046For the purpose of this discussion the following RTs will be used, though other RTs may also be used: <ul><li id="ul0001-0001" num="0000"><ul><li id="ul0002-0001" num="0046">(a) Ethernet tag Auto-discovery—allows for Designated Forwarder (DF) election and load balancing functions. May be used for fast MAC Withdraw;</li><li id="ul0002-0002" num="0047">(b) MAC Advertisement—used for MAC address advertisement between MESes;</li><li id="ul0002-0003" num="0048">(c) Inclusive Multicast VLAN—provides a mechanism to indicate that a certain packet was flooded at the source MES. Usually the BUM traffic (BUM=Broadcast, Unknown Unicast, Multicast) traffic is flooded at ingress MES. This ensures only one copy of a flooded packet is delivered to a Multi-homed (MH) CE as only the DF is forwarding the packets marked flooded to the MH CE; and/or</li><li id="ul0002-0004" num="0049">(d) Ethernet Segment Route—provides for loop avoidance; incoming traffic from the MH CE on the non-DF Attachment Circuit is tagged with a label specific to the MH ESI. At the receiving MES that contains the DF for that MH ESI the tag is used to block the packet from being forwarded back to the same MH CE.</li></ul></li></ul>

p-0047An exemplary structure for the NLRI carrying the MAC Advertisement RT will now be discussed. The structure includes the following:

p-0048(1) The Route-Distinguisher (RD) of the MAC-VPN instance that is advertising the NLRI. Specifically, a unique RD is assigned for each MAC-VPN instance on a MES, such as by using a Type 1 RD. The value field may comprise an IP address of the MES (such as the loopback address) followed by a number unique to the MES. This number may be generated by the MES or it may be all or a portion of the VLAN ID (e.g., such as for the Single VLAN MAC-VPN case).

p-0049(2) The VLAN ID if the MAC address is learned over a VLAN from the CE (set to 0 otherwise).

p-0050(3) The Ethernet Segment Identifier (ESI).

p-0051(4) The MAC address.

p-0052(5) Optionally, one or more of the IP addresses associated with the learned MAC address.

p-0053(6) The MAC-VPN MPLS label that is used by the MES to forward packets received from remote MESs. A MES may advertise the same MAC-VPN label for all MAC addresses in a given MAC-VPN instance (denoted as per-MVI label assignment) or a unique MAC-VPN label for each MAC address. Per-MVI label assignment requires the least number of MAC-VPN labels, but requires a MAC lookup in addition to a MPLS lookup on an egress MES for forwarding. Unique MAC address label assignment allows an egress MES to forward a packet (e.g., received from another MES to the connected CE) after performing only a MPLS label lookup (i.e., no MAC lookup).

p-0054(7) One or more Route Target (RT) attributes, which may be configured (as in IP VPNs), or may be derived automatically from the VLAN ID associated with the advertisement. The route target (RT) attributes may be derived automatically from the VLAN ID associated with the advertisement by setting the Global Administrator field of the RT to an IP address of the MES. This IP address should be common for all the MAC-VPN instances on the MES, such as the loopback address of the MES. A different RT may be used for every VLAN in a MAC-VPN if the MAC-VPN contains multiple VLANs, while the RT for MAC-VPN including only one VLAN is derived from the VLAN for that MAC-VPN.

p-0055(8) Optionally, the IP addresses associated with the MAC address, such as if the number of IP addresses is more than one and cannot be encoded in the NLRI.

p-0056Data Plane Impact of Label Allocation

p-0057Label allocation may be provided by, illustratively, per-Mac, per-ESI, or per-VMI. There are various tradeoffs to be considered, including the following tradeoffs. If label allocation is provided per-MAC, the result is a very high label count, egress forwarding with optional MAC lookup, and support of ETREE. If label allocation is provided per-ESI, the result is a medium label count, egress forwarding with optional MAC lookup, and support of ETREE. If label allocation is provided per-VMI, the result is a low label count, egress forwarding with required MAC lookup, and no support of ETREE.

p-0058Designated Forwarder (DF) Election for Multi-Homed CE

p-0059If a CE that is a host or a router is multi-homed directly to more than one MES in a MAC-VPN, only one of MESs is responsible for certain actions. Specifically, only one MES will send multicast, broadcast and unknown unicast traffic (i.e., traffic for which a MES does not know the destination MAC address) to the CE. A CE typically sends packets using a single link. If the CE is a host, then the host CE treats the multiple links used to reach the MESs as a Link Aggregation Group (LAG) or a bundle.

p-0060If a bridge network is multi-homed to more than one MES in a MAC-VPN via switches, only one of the MESs is responsible for certain actions. Specifically, only one MES in the multi-homed bridge network will (1) forward packets to other MESs outside of the multi-homed bridge network; (2) send multicast, broadcast and unknown unicast traffic to the bridge network.

p-0061The particular one MES is referred to as the designated forwarder (DF) MES for the Ethernet segment over which the CE is multi-homed to two or more MESs. This Ethernet segment may be a link bundle such as where the host or router is directly connected to the MESs, or a bridged LAN network such as where the CEs are switches.

p-0062The MESs perform a designated forwarder (DF) election using BGP for an Ethernet segment or combination of Ethernet segment and VLAN. In order to perform DF election, each MES advertises in BGP a Ethernet Tag auto-discovery route type using the MAC-VPN-NLRI for each Ethernet segment in a MAC-VPN.

p-0063Each Ethernet Tag auto-discovery NLRI typically contains the following information elements or fields:

p-0064(1) The Route-Distinguisher (RD) of the MAC-VPN instance that is advertising the NLRI.

p-0065(2) An Ethernet Segment Identifier.

p-0066(3) Optionally, a VLAN ID which may be set to 0.

p-0067(4) An upstream assigned MPLS label referred to as the “ESI label.”

p-0068(5) A P-Tunnel attribute such as specified in VPLS-MCAST.

p-0069(6) One or more Route Target (RT) attributes.

p-0070The DF election for a particular ESI and VLAN combination proceeds by constructing a candidate list of MESs, and choosing a DF from the candidate list.

p-0071The candidate list is constructed at a MES or NMS and includes all the routes with the particular {ESI, VLAN} tuple that a MES imports in a MAC-VPN instance, including the route generated by the MES itself, if any.

p-0072The DF MES is then selected or elected from this candidate list by those MESs that import the Ethernet tag auto-discovery route type. In one embodiment, the selected DF is the MES with the highest IP address of all the MESs in the candidate list. In this manner, each MES will choose the same DF MES for a given ESI and VLAN combination (except during routing transients).

p-0073BGP MAC VPN Issues

p-0074The above described mechanisms are improved to address various challenges associated with BGP MAC-VPN related to (1) packet duplication, where a remote CE receives two copies of the same packet; (2) loop prevention, where a packet originated by CE<b>1</b> is returned to CE<b>1</b> (e.g., permanent loops and/or transitory loops, no TTL in the ETH packet, etc.); and (3) MAC table instability, where a MAC table M<b>1</b> appears alternatively at destination CE<b>2</b> on different links (such that it needs to be moved frequently between links, thereby creating re-ordering issues and MAC table instability).

p-0075In one embodiment, the MAC table instability issue is addressed by a BGP MAC VPN mechanism in which a Link Aggregation Group (LAG) is used at the CE so that the same MAC appearing on multiple links does not create MAC moves/MAC table instability. In this embodiment, MAC learning at the CE is turned off and replaced with a CE&lt;-PE MAC protocol. This approach is a modified version of the approach described in IEEE 802.1aq specification.

p-0076A generic flooding label is generated by each destination PE routers for each flooding domain and distributed using downstream label allocation (<figref idrefs="DRAWINGS">FIG. 2</figref>), or by source PE routers and distributed using upstream label allocation (<figref idrefs="DRAWINGS">FIG. 3</figref>). Source PE routers responsively route packets according to their destination MAC address (if known) adding the associated unicast label for the MAC address. If the MAC address is unknown or if it is a group MAC (Multicast/Broadcast) the appropriate flooding label(s) are added to the packet to indicate the packet was flooded at the source in the BGP MAC VPN context. An additional point to point tunnel label (downstream label allocation case) or a point to multi-point tunnel label (upstream label allocation case) may be added to the packet to transport it through the MPLS network <b>110</b>.

p-0077<figref idrefs="DRAWINGS">FIG. 2</figref> depicts a flow diagram of a downstream label allocation method according to one embodiment. Specifically, <figref idrefs="DRAWINGS">FIG. 2</figref> depicts a flooding label distribution method <b>200</b> suitable for distributing flooding labels in a BGP MAC VPN providing point to point (P2P) label switched paths (LSPs).

p-0078One flooding label is provided for each flooding domain in a MAC-VPN Instance (MVI) and one for each Ethernet Segment Identifier (ESI) associated with a Multi-Homing CE. The generated flooding labels are advertised to the other PEs using the previously described BGP Network Layer Reachability Information (NLRI) denoted as MAC-VPN-NLRI.

p-0079At step <b>210</b>, at destination provider edge (PE) routers, for each MVI that is advertising using NLRI, the corresponding PE router generates a Generic Flooding Label (GEL) and includes within the NLRI the Inclusive Multicast VLAN RT format: Route-Distinguisher (RD) of the MVI, an ESI, an Ethernet tag, and the Originating Router's IP Address. That is, NLRI: RD+ESI+Ethernet tag+Router IP. The GEL is included in the P-Tunnel attribute where the tunnel type is point-to-point.

p-0080At step <b>220</b>, at destination PE routers, for each DF ESI that is advertised using NLRI, the corresponding PE router also generates a respective Multi-Homing Flooding Label (MHFL) and includes within the NLRI the Ethernet Segment RT format: Route-Distinguisher (RD), the specific ESIx, the corresponding MHFLx and the Originating Router's IP Address. That is, NLRI: RD+ESIx+MHFLx+PE IP.

p-0081At step <b>230</b>, at source provider equipment (PE) routers, all broadcast/unknown unicast/multicast (BUM) traffic incoming on any attachment circuit (AC) is replicated and sent then towards all the destination PEs that are MAC VPN members using the GFL advertised by each destination PE.

p-0082At step <b>240</b>, at source provider equipment (PE) routers, in addition to the GFL, BUM traffic entering on a Non-DF AC of ESIx is tagged with the MHFLx distributed by the destination PE with the corresponding ESN. That is, the Multi-Homing Flooding Label associated with a particular ESI is kept only for BUM traffic originated at the Non-DF AC associated with the particular ESI.

p-0083At step <b>250</b>, at destination PE routers, any packet received on the P2MP LSP is flooded to all the local MVI endpoints except for the non-DF ACs. When the MHFLx is present, the packet is also not sent on the DF AC for ESIx.

p-0084<figref idrefs="DRAWINGS">FIG. 3</figref> depicts a flow diagram of an upstream label allocation method according to one embodiment. Specifically, <figref idrefs="DRAWINGS">FIG. 3</figref> depicts a flooding label distribution method <b>300</b> suitable for distributing flooding labels in a BGP MAC-VPN using point to multi-point (P2MP) label switched paths (LSPs).

p-0085A P2MP LSP label is provided for each MAC-VPN Instance (MVI) and a flooding label is provided for each non-designated forwarder (non-DF) on an Ethernet Segment Identifier (ESI). The generated labels are propagated or advertised to the other PEs using the previously described Network Layer Reachability Information (NLRI) denoted as MAC-VPN-NLRI.

p-0086At step <b>310</b>, at source provider edge (PE) routers, for each MVI that is advertising using NLRI, the corresponding PE generates the NLRI using the Inclusive Multicast VLAN RT format: Route-Distinguisher (RD) of the MVI, an ESI, an Ethernet tag and the Originating Router's IP Address. That is, NLRI: RD+ESI+Ethernet tag+Router IP along with the P-Tunnel (PMSI Tunnel) attribute with tunnel type of P2MP. There is no GFL used for any BUM traffic incoming on ACs since the label associated with the P2MP LSP already indicates that the traffic was flooded at the source PE.

p-0087At step <b>320</b>, at source PE routers, for each non-DF ESI that is advertising using NLRI, the corresponding PE also generates a respective MHFL and includes within the NLRI the Ethernet Segment RT format: Route-Distinguisher (RD), the specific ESIx, the corresponding MHFLx and the Originating Router's IP Address along with a P-tunnel attribute. That is, NLRI: RD+ESIx+MHFLx+PE IP, along with the P-Tunnel attribute. The MHFLx is used for any BUM traffic incoming on the non-DF AC for ESIx in addition to the P2MP LSP label.

p-0088At step <b>330</b>, at destination PE routers, any packet received on the P2MP LSP is flooded to all the local MVI endpoints except for the non-DF ACs. When the MHFLx is present the packet is also not sent on the DF AC for ESIx.

p-0089The methodologies of <figref idrefs="DRAWINGS">FIGS. 2-3</figref> contemplate the distribution and use of a Generic flooding Label (GFL) and a Multi-Homing Flooding Label (MHFLx).

p-0090In this manner, a loopback avoidance mechanism is provided to prevent traffic originating from a Non-DFx AC on a source PE to be forwarded back to a CEx via the DFx. The mechanism also prevents packet duplication when the same packet flooded to both DFx and Non-DFx endpoints is forwarded towards CEx.

p-0091For example, it can be seen in <figref idrefs="DRAWINGS">FIG. 1</figref> that both CE-<b>2</b> and CE-<b>3</b> are multi-homed to MES-<b>1</b> and MES-<b>2</b>, with MES-<b>2</b> selected as the DF. Traffic flow from CE-<b>2</b> or CE-<b>3</b> to MES-<b>1</b> will be dropped by MES-<b>1</b>, while traffic flow from CE-<b>2</b> or CE-<b>3</b> to MES-<b>2</b> will either be forwarded by MES-<b>2</b> to the correct destination MES (destination MAC address known to MES-<b>2</b>) or flooded to the other MESs (destination MAC address unknown to MES-<b>2</b>) as described herein. In this manner, traffic is not unnecessarily flooded back toward a source of the traffic.

p-0092The above described methods and techniques provide a BGP MAC VPN solution adapted to prevent loops and packet duplication using a third MPLS label in the packet or second MPLS label for P2MP LSP/MP2MP LSPs if no aggregate tree is used, either GFL and MHFLx.

p-0093Generally speaking, in the case of BUM traffic, a third label is added in the packet. If an aggregate tree is not used then a second label is used for P2MP LSP/MP2MP LSPs (either GFL or MHFLx label). At the source MES, the BUM traffic is tagged using (upstream/downstream) Generic Flooding Label (GFL), GFL=0 (implicit NULL label). In various embodiments, the GFL label is the same on all MES(s), for local flooding the packet is sent to all local AC(s), which are SH and DF MH AC(s), and at a remote MES the flood traffic is tagged with a GFL only to SH &amp; DF ACs.

p-0094Computer Hardware/Software Implementation

p-0095<figref idrefs="DRAWINGS">FIG. 4</figref> depicts a computer architecture and optional switching mechanism suitable for use in the various embodiments described herein. The computer architecture may be adapted to implement the specific functions described herein including label generation, label distribution, packet routing, datagram routing, traffic routing, control plane processing functions, data plane processing functions and so on.

p-0096The computer architecture comprises, illustratively, a processor element <b>410</b> (e.g., a central processing unit (CPU) and/or other suitable processor(s)), a memory <b>420</b> (e.g., random access memory (RAM), read only memory (ROM), and the like), a BGP MAC-VPN module/process <b>425</b> (which may be included within the memory <b>420</b>) and various input/output devices <b>430</b>.

p-0097The memory <b>420</b> is depicted as including control programs <b>422</b>, data storage <b>424</b> and supporting programs <b>426</b>. These various programs and data storage portions of the memory <b>420</b> may be used to store programs for executing the methodologies described herein, programs for supporting the various methodologies, databases, router tables and other data structures supporting the various methodologies, reporting functions/programs and so on.

p-0098The various input/output devices <b>430</b> may include user input devices such as a keyboard, a keypad, a mouse, and the like; user output device such as a display, a speaker, and the like; input communications port(s), output communications port(s); a receiver/transmitter (e.g., network connection or other suitable type of receiver/transmitter); a storage devices (e.g., a hard disk drive, a compact disk drive, an optical disk drive, and the like).

p-0099Optional switching mechanism <b>490</b> includes a switching fabric <b>492</b> and ingress/egress ports <b>494</b>. Specifically, the optional switching mechanism <b>490</b> is depicted as communicating with a first group of other routing/switching devices via a first plurality of input/output ports <b>494</b>A, and communicating with a second group of other routing/switching devices via a second plurality of input/output ports <b>494</b>B. The optional switching mechanism <b>490</b> is depicted in a relatively generic configuration. Other configurations associated with the optional switching mechanism <b>490</b> will be readily understood by those skilled in the art and are contemplated by the inventors as useful within the context of the present embodiments.

p-0100In one embodiment, computer software code associated with methods for invoking the various embodiments can be loaded into the memory and executed by the processor to implement the functions as discussed herein above. In one embodiment, the computer software code associated with methods for invoking the various embodiments can be stored on a computer readable storage medium, e.g., RAM memory, magnetic or optical drive or diskette, and the like. The computer is suitable for use as any of the network elements depicted and described herein, including but not limited to customer edge (CE) routers, provider edge (PE) routers, MPLS Edge Switches (MESs), and other network elements depicted and described herein.

p-0101It is contemplated that functions depicted and described herein may be implemented in software and/or in a combination of software and hardware, e.g., using a general purpose computer, one or more application specific integrated circuits (ASIC), and/or any other hardware equivalents.

p-0102It is contemplated that some of the steps discussed herein as software methods may be implemented within hardware, for example, as circuitry that cooperates with the processor to perform various method steps. Portions of the functions/elements described herein may be implemented as a computer program product wherein computer instructions, when processed by a computer, adapt the operation of the computer such that the methods and/or techniques described herein are invoked or otherwise provided. Instructions for invoking the inventive methods may be stored in tangible fixed or removable media, transmitted via a data stream in a tangible or intangible broadcast or other signal bearing medium, and/or stored within a memory within a computing device operating according to the instructions.

p-0103Although primarily depicted and described herein with respect to embodiments in the BGP MAC-VPN capability is used in conjunction with specific protocols, the principles of the BGP MAC-VPN capability may be adapted for use with any other suitable protocol(s).

p-0104Although primarily depicted and described herein with respect to embodiments in the BGP MAC-VPN capability is used in conjunction with a specific type of network (illustratively, an IP/MPLS network), the principles of the BGP MAC-VPN capability may be adapted for use with any other suitable network(s).

p-0105Generally speaking, computer hardware, software and/or firmware of the general architecture discussed herein may be replicated and used at each of a plurality of nodes or network elements or network management elements associated with a network. Moreover, such computer hardware, software and/or firmware at various locations, nodes, network elements or network management system elements may be operably communicating with each other to achieve the various steps, protocols, interactions and so on contemplated herein.

p-0106<figref idrefs="DRAWINGS">FIG. 5-7</figref> depict high-level block diagrams of a communication network architecture operating according to various embodiments. Specifically, <figref idrefs="DRAWINGS">FIGS. 5-7</figref> depict the architecture of <figref idrefs="DRAWINGS">FIG. 1</figref> with traffic flow indication arrows along the referenced paths <b>190</b>-<b>197</b> indicative of flooding behaviors in accordance with various embodiments.

p-0107<figref idrefs="DRAWINGS">FIG. 5</figref> illustrates an example of PE router flooding behavior responsive to the reception of BUM traffic at a non-DF MH PE router. Specifically, CE-<b>2</b> forwards BUM traffic to MES-<b>1</b> via path <b>193</b>. MES-<b>1</b> is a non-DF PE router with respect to CE-<b>2</b>.

p-0108MES-<b>1</b>, which is a non-DF MH router with respect to CE-<b>2</b>, responsively floods the BUM traffic to all other MEs <b>130</b> via path <b>191</b> and to any CE to which ME-<b>1</b> is a DF MH router (CE-<b>1</b> via path <b>192</b> in this example). Note that BUM traffic is not flooded from MES-<b>1</b> to CE-<b>3</b> via path <b>194</b>, since ME-<b>1</b> is not a DF router with respect to CE-<b>3</b>.

p-0109MES-<b>2</b>, which receives the flooded BUM traffic from MES-<b>1</b> via path <b>190</b>, responsively floods the BUM traffic to all of its homed or local CEs except the local CE with the same ESI as the BUM traffic; namely, CE-<b>2</b>. in this manner, the BUM traffic originated at CE-<b>2</b> is not flooded or otherwise routed back to CE-<b>2</b>.

p-0110Also depicted in <figref idrefs="DRAWINGS">FIG. 5</figref> are the various labels associated with the traffic passing through the IP/MPLS core <b>110</b> under the control of NMS <b>120</b>. The stacked labels include three labels associated with the ingress replication stack <b>510</b> (where the third label is denoted as LBL=2+16), two labels associated with the P2MP LSP/MP2MP LSP <b>520</b>, and three labels associated with the P2MP LSP/MP2MP LSP+aggregated tree <b>530</b> (where the third label is denoted as LBL=2+16).

p-0111<figref idrefs="DRAWINGS">FIG. 6</figref> illustrates an example of PE router flooding behavior responsive to the reception of BUM traffic at a DF MH PE router. Specifically, CE-<b>2</b> forwards BUM traffic to MES-<b>2</b> via path <b>195</b>. MES-<b>2</b> is a DF PE router with respect to CE-<b>2</b>.

p-0112MES-<b>2</b>, which is a DF MH router with respect to CE-<b>2</b>, responsively floods the BUM traffic to all other MEs <b>130</b> via path <b>190</b>, and to any CE to which ME-<b>3</b> is a DF MH router (CE-<b>3</b> via path <b>196</b> and CE-<b>4</b> via path <b>197</b> in this example). Note that BUM traffic is not flooded from MES-<b>2</b> back to CE-<b>2</b> via path <b>195</b>,

p-0113MES-<b>1</b>, which receives the flooded BUM traffic from MES-<b>2</b> via path <b>191</b>, responsively floods the BUM traffic to all of its DF homed local CEs; namely, CE-<b>1</b>. MES-<b>1</b> does not forward the BUM traffic to any connected non-DF CEs, such as CE-<b>2</b> and CE-<b>3</b> in this example. In this manner, the BUM traffic originated at CE-<b>2</b> is not flooded or otherwise routed back to CE-<b>2</b>.

p-0114Also depicted in <figref idrefs="DRAWINGS">FIG. 6</figref> are the various labels associated with the traffic passing through the IP/MPLS core <b>110</b> under the control of NMS <b>120</b>. The stacked labels include three labels associated with the ingress replication stack <b>610</b> (where the third label is denoted as LBL=2+16), two labels associated with the P2MP LSP/MP2MP LSP <b>620</b>, and three labels associated with the P2MP LSP/MP2MP LSP+aggregated tree <b>630</b> (where the third label is denoted as LBL=2+16). It is noted that a third entity denoted as ALU<b>5</b> is associated with the P2MP LSP/MP2MP LSP stack <b>620</b> due to the processing of BUM traffic by a DF MH site.

p-0115<figref idrefs="DRAWINGS">FIG. 7</figref> illustrates an example of PE router flooding behavior responsive to the reception of BUM traffic received at a SH MH PE router. Specifically, CE-<b>1</b> forwards BUM traffic to MES-<b>1</b> via path <b>192</b>. MES-<b>1</b> is a DF PE router with respect to CE-<b>1</b>.

p-0116MES-<b>1</b>, which is a OF MH router with respect to CE-<b>1</b>, responsively floods the BUM traffic to all other MEs <b>130</b> via path <b>191</b>, and to any CE to which ME-<b>1</b> is a OF MH router (none in this example). Note that BUM traffic is not flooded from MES-<b>1</b> back to CE-<b>1</b> via path <b>192</b>,

p-0117MES-<b>2</b>, which receives the flooded BUM traffic from MES-<b>1</b> via path <b>190</b>, responsively floods the BUM traffic to all of its SH and MH CEs; namely, CE-<b>2</b>, CE-<b>3</b> and CE-<b>4</b>. In this manner, the BUM traffic originated at CE-<b>1</b> is not flooded or otherwise routed back to CE-<b>1</b>.

p-0118Also depicted in <figref idrefs="DRAWINGS">FIG. 7</figref> are the various labels associated with the traffic passing through the IP/MPLS core <b>110</b> under the control of NMS <b>120</b>. The stacked labels include three labels associated with the ingress replication stack <b>710</b> (where the third label is denoted as LBL=0), two labels associated with the P2MP LSP/MP2MP LSP <b>720</b>, and three labels associated with the P2MP LSP/MP2MP LSP+aggregated tree <b>730</b> (where the third label is denoted as LBL=0).

p-0119Although various embodiments which incorporate the teachings of the present invention have been shown and described in detail herein, those skilled in the art can readily devise many other varied embodiments that still incorporate these teachings.